Skip to content

Security

Handling outside data

How answers and provider messages are checked.

On this page

Model output

The case-selection model can only choose from pairs already found in the rankings. It cannot invent evidence or declare a taste failure. Unsupported choices are rejected, and provider operations have fixed limits.

Adapter results

Returned answers must match the expected format and size limit. An invalid answer is shown as malformed, not silently rewritten into a recommendation.

In the web app

The app treats assistant text and provider messages as text, not code to run. It does not turn them into executable HTML or clickable links.